PHP 5.3.27 Released - PHP 5.3 Reaching End of Life

Arieh

Arieh

Verified User
Joined
May 27, 2008
Messages
1,236
Location
The Netherlands
The PHP development team announces the immediate availability of PHP
5.3.27. About 10 bugs were fixed, including a security fix in the XML
parser (Bug #65236).

Please Note: This will be the last regular release of the PHP 5.3
series. All users of PHP are encouraged to upgrade to PHP 5.4 or PHP
5.5. The PHP 5.3 series will receive only security fixes for the next
year.

The list of changes is recorded in
the ChangeLog on http://www.php.net/ChangeLog-5.php#5.3.27.
Click to expand...

Already in custombuild.
 
As stated in the changelogs of PHP5.5, there are no big changes that will break earlier scripts.
Joomla, Wordpress runs very fine under PHP5.5.
 
@Pucky: Do you also have contributive answers?

@vancanneyt and @Peter Laws: Thank you.

@Sellerone: Hmmz... interesting... I would like to know that too.
Also because I'm reading about Magento is having some minor issues on 5.4 but not yet supporting 5.5. And Magento is one of the better webshops which are used today. So this might influence a decision to upgrade to 5.4 instead of 5.5.
 
I think Magento doesn't support 5.5 because it's not well tested on it yet by the developers. There could always be a glitch somewhere so the devs wait to test it before stating it is supported.
You can try PHP5.5 and look through the logs and magento site for any issues, for example on a local webserver on the PC before upgrading it on the server.
 
Thank you.
I also read on php 5.4 the register_globals directive is removed. Some software require register_globals on. I just don't understand if it's now always on or always off since the setting is gone.
I think I'll hold on 5.3 for a while. Several customers got Vbulletin 3.8.7 pl3 which would be the last and final 3.8.x version and declared end of life. Version 3.8.7 pl3 is not officialy supported for php 5.4 either.
Now it seems they still brought a 3.8.8 version which is compatible with php 5.4, but in order to be able to get it, one should be a full 5.x forum license. They went a bit crazy at VB after the takeover.:( That's why several customers choose to not upgrade anymore to newer versions. It's getting too expensive now.
So I will advise all our customers with vb 3.8.x to look for a better replacement first (and soon), like phpBB or something better. This will take several months, and then we will upgrade.
 
Richard G said:
Thank you.
I also read on php 5.4 the register_globals directive is removed. Some software require register_globals on. I just don't understand if it's now always on or always off since the setting is gone.
Click to expand...

It's not just the setting that has been removed, it's the whole register global feature. What it did you can read on http://php.net/manual/en/security.globals.php -- it's quite dangerous and that is why it has been removed.


PHP versioning and customers is always a tricky thing. An easy solution would be using CloudLinux as they allow you to run as many php versions alongside as you want and simply let the customer be responsible.
 
We alwasy use register_globas=off for security. Maybe I wasn't clear about what I ment of my way of explaining in English is a bit wrong.

I presume that software which required register_globals set to on, will have problem when using 5.4.

But is this the same with software requiring register_globals set to off? If those don't have a problem, removing the directive can be compared with an unchangeble "off" setting imho.
 
If a script is checking for register_globals to be off, it may run into trouble. I'm not sure, it may depend on how it is checking. Maybe through ini_get, or it may just simply test if it could make use of register_globals functionality. A good developer would only make an issue of it if it would be sure that it's actually confirmed ON, not if it's NOT off.
 
Here's a way to mimic the need to use register_globals if it's disabled/gone
PHP: 
if (!ini_get('register_globals')){
    $_vars_order = ini_get('variables_order');
    if ($_vars_counter = strlen($_vars_order)) {
        for ($i = 0; $i < $_vars_counter; $i++)  {
            $_make_global = array();
              if ($_vars_order[$i] == "G")
                $_make_global = $_GET;
             elseif ($_vars_order[$i] == "P")
                $_make_global = $_POST;
            elseif ($_vars_order[$i] == "S")
                    $_make_global = $_SERVER;
            elseif ($_vars_order[$i] == "C")
                    $_make_global = $_COOKIE;
         if (count($_make_global))     {
                foreach ($_make_global as $_global_var => $_global_value)
                    $$_global_var = $_global_value;
          }
      }
 }
}
Note: I have a very old script (2004) and this worked, may not work for everyone
 
Last edited:
php 5.3 is on end of life when php 5.4 is still unreachable for hosting servers.
ioncube isnt available
several module is is still unavailable
 
Yes, it is possible to install ionCube for PHP 5.4 using the CustomBuild script.
 
nimafire said:
is it added on custombuild ?
because i have test it several times , disappointment
Click to expand...

You first need to manually delete this file: /usr/local/directadmin/custombuild/ioncube_loaders_lin_x86-64.tar.gz

Then you can run ./build update and ./build ioncube - if you do not delete that file manually, it will only install the old version that you already has installed.
 
ditto said:
You first need to manually delete this file: /usr/local/directadmin/custombuild/ioncube_loaders_lin_x86-64.tar.gz
Click to expand...

Thank you for the report. It will be fixed into the next release of CB 2.0.
 
You must log in or register to reply here.
Back
Top